Run a command with ambient capabilities
| #!/bin/bash | |
| # Run from terminal like enter-caps ./wireshark | |
| export PS1="#$PS1" | |
| export WIRESHARK_RUN_FROM_BUILD_DIRECTORY=1 | |
| caps=cap_net_admin,cap_net_raw | |
| sudo -E capsh --keep=1 --caps="cap_setuid,cap_setgid,cap_setpcap+ep $caps+eip" --user=[my_hardcoded_username] --addamb="$caps" -- -c "$@" | |
| echo "...Exiting enter-caps" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment